4 ms·

Not again and it is NPM once more. > Any project that installs one of these versions, directly or transitively, will pull the compromised release. Hope you ha

by rvz 6mo ago

Not again and it is NPM once more. > Any project that installs one of these versions, directly or transitively, will pull the compromised release. Hope you have pinned your dependencies in your package.json. What a disaster.